CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 14/07/2026 |
| CVE-2026-50411 | 高7.5 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | 14/07/2026 |
| CVE-2026-50408 | 中5.5 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 14/07/2026 |
| CVE-2026-50368 | 高7.5 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. | 14/07/2026 |
| CVE-2026-50355 | 高7.5 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network. | 14/07/2026 |
| CVE-2026-48580 | 中5.5 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 14/07/2026 |
| CVE-2026-47642 | 高7.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-47295 | 高8.8 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network. | 14/07/2026 |
| CVE-2026-58647 | 中5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to perform spoofing over a network. | 14/07/2026 |
| CVE-2026-58644KEV | 緊急9.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | 14/07/2026 |
| CVE-2026-58636 | 高7.8 | Improper link resolution before file access ('link following') in Window PC Manager allows an authorized attacker to elevate privileges locally. | 14/07/2026 |
| CVE-2026-58631 | 高7.8 | Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-58618 | 高7.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-58595 | 高8.1 | Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network. | 14/07/2026 |
| CVE-2026-58279 | 中6.5 | Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. | 14/07/2026 |
| CVE-2026-57969 | 高8.8 | Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. | 14/07/2026 |
| CVE-2026-57107 | 高7.8 | Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally. | 14/07/2026 |